configure force_ssl to true for increased security